Bi

This addon allows you to send lua scripts to be executed on another player's client, and vice versa. You must explicitly allow another player to send you scripts, but do so very carefully, because allowing them will give them access to your entire UI!

---------
Using Bi:
_________

To send a script to another player:
• /bi send <playername> <script>
• Bi_Qian("script", "playername")
"script" is a string that will be executed on the target's client using RunScript(). Make the string say exactly what you want the your target's client to interpret.

To allow a player to send scripts to be run on your client:
• /bi allow <playername>
• Bi_TongRen("playername")

Originally posted by syrupk This seems unsafe somehow. Can you explain this some more to us?

Sure. The addon will not let just anyone send you scripts; you must specifically name them in order to receive scripts from them. However, you must be careful about who you name, since they can basically do whatever they want to you ("/send name while true do end" anyone?). For that reason, the other person will probably be yourself. I use this when I'm testing addons that have inter-player functionality; it helps me control my trial account character without having to run across the house.

May you add an option for a pass-code/key and a pop-up box asking if we want to run the code or not with the text of the key in it, in addition to the white-list? These two features would help reduce unintended abuse. And the pass-code, it only ought to be sent once per session, and saved in the saved vars; I ask about this key because it is more likely for the account to be compromised then the local machine and the sv file for the account along with the account. The key would add another layer of security, provided the user does not use the same one for different instances of the program across different accounts.

Another question: Any future support for more then what SendChatMessage/SendAddonMessage can cary at a time? Such as, the mod tells the other instance of the mod how many lines of code, wait for all the lines of code for a block to be received, put them in the right order and concatenated them together, and then call the RunScript() on the full block? This would be a rather useful lib, in my opinion, if it did that. Also, you might want to use ChatFilterLib for sending the messages, it helps throttle the messages.

__________________
Currently contemplating coming back to Authorship.. been away for years. Please let me know you care, by commenting on what addon(s) of mine you want to see updated.

Originally posted by Mike-N-Go May you add an option for a pass-code/key and a pop-up box asking if we want to run the code or not with the text of the key in it, in addition to the white-list? These two features would help reduce unintended abuse. And the pass-code, it only ought to be sent once per session, and saved in the saved vars; I ask about this key because it is more likely for the account to be compromised then the local machine and the sv file for the account along with the account. The key would add another layer of security, provided the user does not use the same one for different instances of the program across different accounts.

Another question: Any future support for more then what SendChatMessage/SendAddonMessage can cary at a time? Such as, the mod tells the other instance of the mod how many lines of code, wait for all the lines of code for a block to be received, put them in the right order and concatenated them together, and then call the RunScript() on the full block? This would be a rather useful lib, in my opinion, if it did that. Also, you might want to use ChatFilterLib for sending the messages, it helps throttle
the messages.

The confirmation and/or passcode are good ideas, but the confirmation box should certainly be an option, otherwise it would kill the ability to remotely control the UI of another computer. As for the multiple lines, this feature is already in it. You can send scripts that are as lengthy as you like

Originally posted by hypehuman The confirmation and/or passcode are good ideas, but the confirmation box should certainly be an option, otherwise it would kill the ability to remotely control the UI of another computer. As for the multiple lines, this feature is already in it. You can send scripts that are as lengthy as you like

Not to pop up the box on every request to run remote code, but for an option to have that. Or have it notify the user, "SOMEONE would like to send some scripts to run, pick an option (always allow) or (ignore) or (this session only)?" This would add the security if people want it, and some users might want that. Or, the popup box could be an 'allow for this session. You could add an option for people to have them on the allow list and authorize per session. I suggest these things because what this mod does has great power, and we may want to protect the user from themselves and others =].

I do not have two accounts, so I cannot really test your mod. Thanks for the reply =]

__________________
Currently contemplating coming back to Authorship.. been away for years. Please let me know you care, by commenting on what addon(s) of mine you want to see updated.